1. System requirements
| Item | Requirement | Validation status |
|---|---|---|
| OS version | macOS 12 or later | Validation on our machines has focused on macOS 15; macOS 12 through 14 have not been validated separately |
| Processor | The current public beta targets Apple silicon Macs | Intel Macs have not been validated; do not treat them as supported |
| Disk | Installer about 73 MB; about 130 MB after installation (including the detection model and inference runtime) | Detection uses additional memory and CPU, more noticeably with long documents |
| Network | Works offline | Only checking for and downloading updates needs a network connection; seesection 5 of the Privacy Policy |
If you run into problems on macOS 12 through 14 or on an Intel Mac, note the OS and model in your report; we will not describe it as supported.
2. Format support matrix
| File type | Support level | Known limits |
|---|---|---|
Word documents .docx |
Supported: detects body text and generates a separate redacted copy | Files with images, embedded objects, or complex structures are conservatively rejected by the background automatic flow (they can be imported in the app and reviewed item by item); comments, tracked changes, hidden text, and document properties are not yet fully handled |
| Text-based PDF | Supported: detects and deletes by the complete text value | Adaptation to different fonts, encodings, and content streams is still being refined; if the same text appears both selected and kept, the app refuses to generate and suggests using the Word version; do not judge from the preview alone that information has been deleted |
| Scanned PDF (image only) | Not supported: no text layer | The app refuses to process it rather than generate a copy that might retain original text |
| Mixed image-and-text PDF | Outside full support | Structures such as images, annotations, patterns, special fonts, or soft masks cause rejection |
| Encrypted documents | Not supported | Files whose contents cannot be read are not processed |
Older Word (.doc), WPS, images, Markdown |
Not yet supported | These directions are planned, but are not provided before a corresponding version ships |
A rejection is not a malfunction: when the file structure cannot guarantee that "the original text is truly deleted," the app prefers to refuse rather than generate a copy that might retain information.
3. Installation and first launch
- Get the DMG installer from the download page or the download repository.
- Open the DMG and drag "Wenyin" into Applications.
- Double-click to open it. The current version is not notarized by Apple, so the system may block it on first launch.
- If it is blocked: open System Settings → Privacy & Security and choose "Open Anyway" for Wenyin. On macOS 12 this is System Preferences → Security & Privacy.
You do not need to disable system security protection. Initial installation uses the DMG; in-app updates use a signed ZIP. The installer also registers the Finder extension; if the system does not enable it automatically, turn it on for Wenyin in System Settings → Login Items & Extensions.
4. Update channels and manual updates
- In-app updates: handled by Sparkle for checking, downloading, signature verification, and installation. It checks automatically by default and notifies you in the interface; downloading and installation happen only after you click.
- Manual checking: in Settings → General → Software Update you can switch to manual mode and click "Check for Updates" at any time; in manual mode no background checks are scheduled.
- Update routes: you can switch between the China route and the overseas route; both routes publish the same build, only the download source differs.
- Manual installation: you can also download a new DMG from the download page or the download repository and install it over the current version; the library and license records are kept.
- Special cases: updates marked as major releases keep a yellow notice and install only after you click; while a Chinese document is being processed, a review is unfinished, or a system dialog is open, installation is postponed until your current work finishes.
Updates download only the version feed and installer, do not upload documents, and do not send usage statistics; update packages are verified with a password signature. For version changes, see thepublic release notes.
5. Uninstallation
Dragging only "Wenyin" to the Trash does not delete the library, license, or caches. The installer provides the 卸载文隐.command script:
- Quit Wenyin if it is running;
- Unregister the Finder extension and the system open-with registration;
- Move
/Applications/文隐.appto the Trash; - Delete
~/Library/Application Support/文隐(including imported document copies, license code, and trial record); - Delete preferences, caches, network caches, and extension containers;
- Delete the trial record from the keychain (the system may ask once).
Copies that went to the system Trash when you deleted data in the app are not emptied automatically; you need to empty the Trash yourself. Manual cleanup list: delete /Applications/文隐.app,~/Library/Application Support/文隐,~/Library/Preferences/com.songsong.docredactor*.plist,~/Library/Caches/com.songsong.docredactor,~/Library/HTTPStorages/com.songsong.docredactor,~/Library/Containers/com.songsong.docredactor*,~/Library/Application Scripts/com.songsong.docredactor*,~/Library/Group Containers/group.com.songsong.docredactor; then turn off the Wenyin extension in System Settings → Login Items & Extensions, and delete com.songsong.docredactor.trial.v2in Keychain Access.
The local "Wenyin Development" build and the "Wenyin Tools" issuing tool are separate channels with separate data; the uninstall script does not touch them.
6. What to include when reporting a problem
- Version and build number: Settings → About in the app, or the two numbers in the downloaded file name (version / build number);
- Your macOS version and model (Apple silicon or Intel);
- Steps to reproduce: what you did, the expected result, and the actual result;
- Whether the problem persists with a different synthetic sample or another library;
- Relevant screenshots.
Do not attach real documents.Do not send real legal documents, party information, credentials, or real content in screenshots. If you need to describe a detection or redaction problem, first create a synthetic sample and describe that.
Reporting channels: email songsong24@foxmail.com, or the two WeChat groups linked from "Join the group chats" in the website footer.
7. Response time
Wenyin is maintained by an individual developer. We do not promise a fixed response time, but we will do our best to confirm and reply within a reasonable time. Security issues are handled before ordinary inquiries; if you asked in the beta group, a reminder in the group is usually the fastest way.
8. Security issues
Please report the following privately by email and do not post details in public channels:
- Sensitive original text left in redacted output;
- Original files being modified, moved, or overwritten;
- Network, telemetry, or crash-reporting behavior in the app;
- Privilege issues with the Finder extension or the local interface: reading document text, accessing library contents, or exposing a network port;
- Missing or mismatched files in the import, export, or undo path.
Again, do not attach real documents; use synthetic samples or redacted fragments.
9. Support scope and services we do not provide
| We provide | We do not provide |
|---|---|
| On-device detection, review, replacement, and export | Cloud detection or cloud redaction (documents do not leave your Mac) |
| In-app updates and public release notes | Sending documents for you, or handing files to any AI service on your behalf |
| Offline license codes and trials | Accounts, subscriptions, remote license revocation, or cross-device sync |
| Usage questions answered by email and in the WeChat groups | Phone or online customer support; Chinese VAT invoices |
| Truthful disclosure of known limits in the release notes | Guarantees about detection completeness, the runtime environment, or delivery times |
| One-code, one-Mac individual licenses | Team, education, or volume licenses (no terms have been established) |
10. List of known limits
Detection
- Detection misses items and misidentifies them: narrative private information, complex addresses, and unusual name formats still need manual additions.
- Detection results are candidates; default checks are suggestions only, not confirmations.
- We do not publish detection rates on this page or present them as guarantees; rely on the actual review results for your own documents.
Layout and structure
- DOCX comments, tracked changes, hidden text, and document properties, and PDF metadata and attachments, must be confirmed separately per the release notes.
- Some PDFs and DOCX files are rejected: when the conditions for safe deletion are not met, the app prefers to refuse rather than generate a copy that might retain original text.
- After replacement, the layout may be affected by font size, font, and replacement-term length; check the text and layout after export.
Fonts and display
- Preview and export use system-provided font rendering; if a document depends on fonts not installed on your Mac, the display may differ from the original editor, but this does not affect whether text is replaced.
- Do not judge from the preview alone that information has been deleted; open the exported file and check it.
Very large files and performance
- Detection uses considerable memory and CPU, more noticeably with longer documents. The current version supports canceling detection; after cancellation the document stays "not scanned" and can be scanned again.
- Detection processes one document at a time in a queue; switching documents in the queue does not interrupt the current task.
- For long documents over 20,000 characters, you can enable "Fast mode for long documents" in Settings: it runs rule-based detection only in exchange for speed, and the interface clearly marks that this document did not use model detection. To get complete candidates, turn the mode off and run again.
- Advice: process long documents separately, avoid running other large tasks during detection, and validate with a small batch before scaling up batch processing.
Runtime environment
- The current installer is not notarized by Apple; on first launch you must allow it manually.
- Intel Macs and macOS 12 through 14 have not been validated; full validation of batch processing, large documents, and assistive technologies is still in progress.
Related pages:Capabilities and Limits · Public Release Notes · License and Refunds